Gecko [ www.jdcpatala.org ]

Name	Size	Permission
core.html	535 B	-rw-r--r--
core.html.de	238.47 KB	-rw-r--r--
core.html.en	293.44 KB	-rw-r--r--
core.html.es	262.51 KB	-rw-r--r--
core.html.fr.utf8	324.56 KB	-rw-r--r--
core.html.ja.utf8	254.26 KB	-rw-r--r--
core.html.tr.utf8	313.84 KB	-rw-r--r--
directive-dict.html	598 B	-rw-r--r--
directive-dict.html.en	17.79 KB	-rw-r--r--
directive-dict.html.es	19.47 KB	-rw-r--r--
directive-dict.html.fr.utf8	19.11 KB	-rw-r--r--
directive-dict.html.ja.utf8	20.06 KB	-rw-r--r--
directive-dict.html.ko.euc-kr	15.65 KB	-rw-r--r--
directive-dict.html.tr.utf8	19.11 KB	-rw-r--r--
directives.html	760 B	-rw-r--r--
directives.html.de	57.67 KB	-rw-r--r--
directives.html.en	57.54 KB	-rw-r--r--
directives.html.es	57.83 KB	-rw-r--r--
directives.html.fr.utf8	57.65 KB	-rw-r--r--
directives.html.ja.utf8	57.74 KB	-rw-r--r--
directives.html.ko.euc-kr	57.39 KB	-rw-r--r--
directives.html.tr.utf8	57.57 KB	-rw-r--r--
directives.html.zh-cn.utf8	57.41 KB	-rw-r--r--
event.html	201 B	-rw-r--r--
event.html.en	28.84 KB	-rw-r--r--
event.html.fr.utf8	31.36 KB	-rw-r--r--
index.html	720 B	-rw-r--r--
index.html.de	23.21 KB	-rw-r--r--
index.html.en	22.93 KB	-rw-r--r--
index.html.es	23.49 KB	-rw-r--r--
index.html.fr.utf8	25.14 KB	-rw-r--r--
index.html.ja.utf8	24.2 KB	-rw-r--r--
index.html.ko.euc-kr	22.37 KB	-rw-r--r--
index.html.tr.utf8	23.2 KB	-rw-r--r--
index.html.zh-cn.utf8	22.81 KB	-rw-r--r--
mod_access_compat.html	322 B	-rw-r--r--
mod_access_compat.html.en	28.41 KB	-rw-r--r--
mod_access_compat.html.fr.utf8	31.22 KB	-rw-r--r--
mod_access_compat.html.ja.utf8	30.51 KB	-rw-r--r--
mod_actions.html	489 B	-rw-r--r--
mod_actions.html.de	13.78 KB	-rw-r--r--
mod_actions.html.en	12.72 KB	-rw-r--r--
mod_actions.html.fr.utf8	13.32 KB	-rw-r--r--
mod_actions.html.ja.utf8	14.43 KB	-rw-r--r--
mod_actions.html.ko.euc-kr	12.37 KB	-rw-r--r--
mod_alias.html	479 B	-rw-r--r--
mod_alias.html.en	36.82 KB	-rw-r--r--
mod_alias.html.fr.utf8	40.04 KB	-rw-r--r--
mod_alias.html.ja.utf8	28.55 KB	-rw-r--r--
mod_alias.html.ko.euc-kr	22.95 KB	-rw-r--r--
mod_alias.html.tr.utf8	39.33 KB	-rw-r--r--
mod_allowmethods.html	223 B	-rw-r--r--
mod_allowmethods.html.en	8.09 KB	-rw-r--r--
mod_allowmethods.html.fr.utf8	8.4 KB	-rw-r--r--
mod_asis.html	386 B	-rw-r--r--
mod_asis.html.en	8.9 KB	-rw-r--r--
mod_asis.html.fr.utf8	9.18 KB	-rw-r--r--
mod_asis.html.ja.utf8	9.74 KB	-rw-r--r--
mod_asis.html.ko.euc-kr	8.47 KB	-rw-r--r--
mod_auth_basic.html	410 B	-rw-r--r--
mod_auth_basic.html.en	19.57 KB	-rw-r--r--
mod_auth_basic.html.fr.utf8	21.6 KB	-rw-r--r--
mod_auth_basic.html.ja.utf8	16.32 KB	-rw-r--r--
mod_auth_basic.html.ko.euc-kr	13.84 KB	-rw-r--r--
mod_auth_digest.html	319 B	-rw-r--r--
mod_auth_digest.html.en	20.11 KB	-rw-r--r--
mod_auth_digest.html.fr.utf8	21.9 KB	-rw-r--r--
mod_auth_digest.html.ko.euc-kr	20.41 KB	-rw-r--r--
mod_auth_form.html	217 B	-rw-r--r--
mod_auth_form.html.en	50.41 KB	-rw-r--r--
mod_auth_form.html.fr.utf8	54.73 KB	-rw-r--r--
mod_authn_anon.html	410 B	-rw-r--r--
mod_authn_anon.html.en	16.5 KB	-rw-r--r--
mod_authn_anon.html.fr.utf8	17.97 KB	-rw-r--r--
mod_authn_anon.html.ja.utf8	18.47 KB	-rw-r--r--
mod_authn_anon.html.ko.euc-kr	16.05 KB	-rw-r--r--
mod_authn_core.html	219 B	-rw-r--r--
mod_authn_core.html.en	16.42 KB	-rw-r--r--
mod_authn_core.html.fr.utf8	17.58 KB	-rw-r--r--
mod_authn_dbd.html	217 B	-rw-r--r--
mod_authn_dbd.html.en	15.09 KB	-rw-r--r--
mod_authn_dbd.html.fr.utf8	16.31 KB	-rw-r--r--
mod_authn_dbm.html	406 B	-rw-r--r--
mod_authn_dbm.html.en	12.69 KB	-rw-r--r--
mod_authn_dbm.html.fr.utf8	13.59 KB	-rw-r--r--
mod_authn_dbm.html.ja.utf8	13.07 KB	-rw-r--r--
mod_authn_dbm.html.ko.euc-kr	11.09 KB	-rw-r--r--
mod_authn_file.html	410 B	-rw-r--r--
mod_authn_file.html.en	11.42 KB	-rw-r--r--
mod_authn_file.html.fr.utf8	12.21 KB	-rw-r--r--
mod_authn_file.html.ja.utf8	12.44 KB	-rw-r--r--
mod_authn_file.html.ko.euc-kr	10.54 KB	-rw-r--r--
mod_authn_socache.html	225 B	-rw-r--r--
mod_authn_socache.html.en	18.82 KB	-rw-r--r--
mod_authn_socache.html.fr.utf8	20.67 KB	-rw-r--r--
mod_authnz_fcgi.html	221 B	-rw-r--r--
mod_authnz_fcgi.html.en	26.98 KB	-rw-r--r--
mod_authnz_fcgi.html.fr.utf8	29.33 KB	-rw-r--r--
mod_authnz_ldap.html	221 B	-rw-r--r--
mod_authnz_ldap.html.en	84.3 KB	-rw-r--r--
mod_authnz_ldap.html.fr.utf8	86.91 KB	-rw-r--r--
mod_authz_core.html	219 B	-rw-r--r--
mod_authz_core.html.en	37.04 KB	-rw-r--r--
mod_authz_core.html.fr.utf8	40.05 KB	-rw-r--r--
mod_authz_dbd.html	217 B	-rw-r--r--
mod_authz_dbd.html.en	18.2 KB	-rw-r--r--
mod_authz_dbd.html.fr.utf8	19.98 KB	-rw-r--r--
mod_authz_dbm.html	313 B	-rw-r--r--
mod_authz_dbm.html.en	12.86 KB	-rw-r--r--
mod_authz_dbm.html.fr.utf8	13.75 KB	-rw-r--r--
mod_authz_dbm.html.ko.euc-kr	10.39 KB	-rw-r--r--
mod_authz_groupfile.html	430 B	-rw-r--r--
mod_authz_groupfile.html.en	10.4 KB	-rw-r--r--
mod_authz_groupfile.html.fr.ut...	10.93 KB	-rw-r--r--
mod_authz_groupfile.html.ja.ut...	9.9 KB	-rw-r--r--
mod_authz_groupfile.html.ko.eu...	8.8 KB	-rw-r--r--
mod_authz_host.html	219 B	-rw-r--r--
mod_authz_host.html.en	13.39 KB	-rw-r--r--
mod_authz_host.html.fr.utf8	14.35 KB	-rw-r--r--
mod_authz_owner.html	414 B	-rw-r--r--
mod_authz_owner.html.en	11.29 KB	-rw-r--r--
mod_authz_owner.html.fr.utf8	11.92 KB	-rw-r--r--
mod_authz_owner.html.ja.utf8	12.93 KB	-rw-r--r--
mod_authz_owner.html.ko.euc-kr	11.1 KB	-rw-r--r--
mod_authz_user.html	410 B	-rw-r--r--
mod_authz_user.html.en	8.11 KB	-rw-r--r--
mod_authz_user.html.fr.utf8	8.37 KB	-rw-r--r--
mod_authz_user.html.ja.utf8	7.39 KB	-rw-r--r--
mod_authz_user.html.ko.euc-kr	6.85 KB	-rw-r--r--
mod_autoindex.html	499 B	-rw-r--r--
mod_autoindex.html.en	60.78 KB	-rw-r--r--
mod_autoindex.html.fr.utf8	67.28 KB	-rw-r--r--
mod_autoindex.html.ja.utf8	64.92 KB	-rw-r--r--
mod_autoindex.html.ko.euc-kr	50.19 KB	-rw-r--r--
mod_autoindex.html.tr.utf8	66.14 KB	-rw-r--r--
mod_brotli.html	211 B	-rw-r--r--
mod_brotli.html.en	21.14 KB	-rw-r--r--
mod_brotli.html.fr.utf8	22.5 KB	-rw-r--r--
mod_buffer.html	211 B	-rw-r--r--
mod_buffer.html.en	9.06 KB	-rw-r--r--
mod_buffer.html.fr.utf8	9.57 KB	-rw-r--r--
mod_cache.html	390 B	-rw-r--r--
mod_cache.html.en	68.08 KB	-rw-r--r--
mod_cache.html.fr.utf8	74.14 KB	-rw-r--r--
mod_cache.html.ja.utf8	52.35 KB	-rw-r--r--
mod_cache.html.ko.euc-kr	38.51 KB	-rw-r--r--
mod_cache_disk.html	410 B	-rw-r--r--
mod_cache_disk.html.en	20.1 KB	-rw-r--r--
mod_cache_disk.html.fr.utf8	21.26 KB	-rw-r--r--
mod_cache_disk.html.ja.utf8	18.36 KB	-rw-r--r--
mod_cache_disk.html.ko.euc-kr	15.72 KB	-rw-r--r--
mod_cache_socache.html	225 B	-rw-r--r--
mod_cache_socache.html.en	18.28 KB	-rw-r--r--
mod_cache_socache.html.fr.utf8	19.06 KB	-rw-r--r--
mod_cern_meta.html	313 B	-rw-r--r--
mod_cern_meta.html.en	11 KB	-rw-r--r--
mod_cern_meta.html.fr.utf8	11.56 KB	-rw-r--r--
mod_cern_meta.html.ko.euc-kr	10.54 KB	-rw-r--r--
mod_cgi.html	382 B	-rw-r--r--
mod_cgi.html.en	18.42 KB	-rw-r--r--
mod_cgi.html.fr.utf8	20.06 KB	-rw-r--r--
mod_cgi.html.ja.utf8	19.72 KB	-rw-r--r--
mod_cgi.html.ko.euc-kr	16.31 KB	-rw-r--r--
mod_cgid.html	386 B	-rw-r--r--
mod_cgid.html.en	11.56 KB	-rw-r--r--
mod_cgid.html.fr.utf8	12.15 KB	-rw-r--r--
mod_cgid.html.ja.utf8	12.2 KB	-rw-r--r--
mod_cgid.html.ko.euc-kr	10.7 KB	-rw-r--r--
mod_charset_lite.html	322 B	-rw-r--r--
mod_charset_lite.html.en	15.35 KB	-rw-r--r--
mod_charset_lite.html.fr.utf8	16.54 KB	-rw-r--r--
mod_charset_lite.html.ko.euc-k...	14.28 KB	-rw-r--r--
mod_data.html	207 B	-rw-r--r--
mod_data.html.en	7.49 KB	-rw-r--r--
mod_data.html.fr.utf8	7.68 KB	-rw-r--r--
mod_dav.html	382 B	-rw-r--r--
mod_dav.html.en	17.91 KB	-rw-r--r--
mod_dav.html.fr.utf8	19.45 KB	-rw-r--r--
mod_dav.html.ja.utf8	20.66 KB	-rw-r--r--
mod_dav.html.ko.euc-kr	17.71 KB	-rw-r--r--
mod_dav_fs.html	394 B	-rw-r--r--
mod_dav_fs.html.en	10.75 KB	-rw-r--r--
mod_dav_fs.html.fr.utf8	11.4 KB	-rw-r--r--
mod_dav_fs.html.ja.utf8	10.6 KB	-rw-r--r--
mod_dav_fs.html.ko.euc-kr	10.17 KB	-rw-r--r--
mod_dav_lock.html	307 B	-rw-r--r--
mod_dav_lock.html.en	9.76 KB	-rw-r--r--
mod_dav_lock.html.fr.utf8	10.32 KB	-rw-r--r--
mod_dav_lock.html.ja.utf8	10.51 KB	-rw-r--r--
mod_dbd.html	205 B	-rw-r--r--
mod_dbd.html.en	24.71 KB	-rw-r--r--
mod_dbd.html.fr.utf8	26.94 KB	-rw-r--r--
mod_deflate.html	398 B	-rw-r--r--
mod_deflate.html.en	28.35 KB	-rw-r--r--
mod_deflate.html.fr.utf8	30.4 KB	-rw-r--r--
mod_deflate.html.ja.utf8	31.06 KB	-rw-r--r--
mod_deflate.html.ko.euc-kr	26.17 KB	-rw-r--r--
mod_dialup.html	211 B	-rw-r--r--
mod_dialup.html.en	7.49 KB	-rw-r--r--
mod_dialup.html.fr.utf8	7.81 KB	-rw-r--r--
mod_dir.html	469 B	-rw-r--r--
mod_dir.html.en	22.39 KB	-rw-r--r--
mod_dir.html.fr.utf8	24.43 KB	-rw-r--r--
mod_dir.html.ja.utf8	19.66 KB	-rw-r--r--
mod_dir.html.ko.euc-kr	16.53 KB	-rw-r--r--
mod_dir.html.tr.utf8	23.66 KB	-rw-r--r--
mod_dumpio.html	301 B	-rw-r--r--
mod_dumpio.html.en	9.62 KB	-rw-r--r--
mod_dumpio.html.fr.utf8	9.99 KB	-rw-r--r--
mod_dumpio.html.ja.utf8	10.32 KB	-rw-r--r--
mod_echo.html	386 B	-rw-r--r--
mod_echo.html.en	7.44 KB	-rw-r--r--
mod_echo.html.fr.utf8	7.58 KB	-rw-r--r--
mod_echo.html.ja.utf8	7.88 KB	-rw-r--r--
mod_echo.html.ko.euc-kr	7.55 KB	-rw-r--r--
mod_env.html	469 B	-rw-r--r--
mod_env.html.en	11.6 KB	-rw-r--r--
mod_env.html.fr.utf8	12.08 KB	-rw-r--r--
mod_env.html.ja.utf8	11.07 KB	-rw-r--r--
mod_env.html.ko.euc-kr	9.9 KB	-rw-r--r--
mod_env.html.tr.utf8	11.72 KB	-rw-r--r--
mod_example_hooks.html	325 B	-rw-r--r--
mod_example_hooks.html.en	11.2 KB	-rw-r--r--
mod_example_hooks.html.fr.utf8	11.9 KB	-rw-r--r--
mod_example_hooks.html.ko.euc-...	10.76 KB	-rw-r--r--
mod_expires.html	398 B	-rw-r--r--
mod_expires.html.en	16.71 KB	-rw-r--r--
mod_expires.html.fr.utf8	17.81 KB	-rw-r--r--
mod_expires.html.ja.utf8	18.29 KB	-rw-r--r--
mod_expires.html.ko.euc-kr	15.08 KB	-rw-r--r--
mod_ext_filter.html	410 B	-rw-r--r--
mod_ext_filter.html.en	18.22 KB	-rw-r--r--
mod_ext_filter.html.fr.utf8	19.71 KB	-rw-r--r--
mod_ext_filter.html.ja.utf8	22.86 KB	-rw-r--r--
mod_ext_filter.html.ko.euc-kr	18.94 KB	-rw-r--r--
mod_file_cache.html	316 B	-rw-r--r--
mod_file_cache.html.en	15.4 KB	-rw-r--r--
mod_file_cache.html.fr.utf8	17.64 KB	-rw-r--r--
mod_file_cache.html.ko.euc-kr	14.45 KB	-rw-r--r--
mod_filter.html	211 B	-rw-r--r--
mod_filter.html.en	31.22 KB	-rw-r--r--
mod_filter.html.fr.utf8	34.81 KB	-rw-r--r--
mod_headers.html	398 B	-rw-r--r--
mod_headers.html.en	33.85 KB	-rw-r--r--
mod_headers.html.fr.utf8	37.21 KB	-rw-r--r--
mod_headers.html.ja.utf8	25.01 KB	-rw-r--r--
mod_headers.html.ko.euc-kr	19.54 KB	-rw-r--r--
mod_heartbeat.html	217 B	-rw-r--r--
mod_heartbeat.html.en	9.55 KB	-rw-r--r--
mod_heartbeat.html.fr.utf8	9.8 KB	-rw-r--r--
mod_heartmonitor.html	223 B	-rw-r--r--
mod_heartmonitor.html.en	12.12 KB	-rw-r--r--
mod_heartmonitor.html.fr.utf8	12.65 KB	-rw-r--r--
mod_http2.html	209 B	-rw-r--r--
mod_http2.html.en	62.64 KB	-rw-r--r--
mod_http2.html.fr.utf8	66.38 KB	-rw-r--r--
mod_ident.html	390 B	-rw-r--r--
mod_ident.html.en	9.94 KB	-rw-r--r--
mod_ident.html.fr.utf8	10.45 KB	-rw-r--r--
mod_ident.html.ja.utf8	10.88 KB	-rw-r--r--
mod_ident.html.ko.euc-kr	9.47 KB	-rw-r--r--
mod_imagemap.html	310 B	-rw-r--r--
mod_imagemap.html.en	21.22 KB	-rw-r--r--
mod_imagemap.html.fr.utf8	23.4 KB	-rw-r--r--
mod_imagemap.html.ko.euc-kr	19.77 KB	-rw-r--r--
mod_include.html	304 B	-rw-r--r--
mod_include.html.en	59.85 KB	-rw-r--r--
mod_include.html.fr.utf8	65.42 KB	-rw-r--r--
mod_include.html.ja.utf8	55.34 KB	-rw-r--r--
mod_info.html	386 B	-rw-r--r--
mod_info.html.en	14.6 KB	-rw-r--r--
mod_info.html.fr.utf8	15.53 KB	-rw-r--r--
mod_info.html.ja.utf8	15.12 KB	-rw-r--r--
mod_info.html.ko.euc-kr	12.6 KB	-rw-r--r--
mod_isapi.html	301 B	-rw-r--r--
mod_isapi.html.en	23.44 KB	-rw-r--r--
mod_isapi.html.fr.utf8	25.48 KB	-rw-r--r--
mod_isapi.html.ko.euc-kr	21.62 KB	-rw-r--r--
mod_lbmethod_bybusyness.html	237 B	-rw-r--r--
mod_lbmethod_bybusyness.html.e...	7.85 KB	-rw-r--r--
mod_lbmethod_bybusyness.html.f...	8.25 KB	-rw-r--r--
mod_lbmethod_byrequests.html	237 B	-rw-r--r--
mod_lbmethod_byrequests.html.e...	12.55 KB	-rw-r--r--
mod_lbmethod_byrequests.html.f...	13.08 KB	-rw-r--r--
mod_lbmethod_bytraffic.html	235 B	-rw-r--r--
mod_lbmethod_bytraffic.html.en	8.2 KB	-rw-r--r--
mod_lbmethod_bytraffic.html.fr...	8.6 KB	-rw-r--r--
mod_lbmethod_heartbeat.html	235 B	-rw-r--r--
mod_lbmethod_heartbeat.html.en	8.29 KB	-rw-r--r--
mod_lbmethod_heartbeat.html.fr...	8.65 KB	-rw-r--r--
mod_ldap.html	207 B	-rw-r--r--
mod_ldap.html.en	52.54 KB	-rw-r--r--
mod_ldap.html.fr.utf8	57.83 KB	-rw-r--r--
mod_log_config.html	504 B	-rw-r--r--
mod_log_config.html.en	35.48 KB	-rw-r--r--
mod_log_config.html.fr.utf8	37.95 KB	-rw-r--r--
mod_log_config.html.ja.utf8	33.81 KB	-rw-r--r--
mod_log_config.html.ko.euc-kr	25.54 KB	-rw-r--r--
mod_log_config.html.tr.utf8	37.34 KB	-rw-r--r--
mod_log_debug.html	217 B	-rw-r--r--
mod_log_debug.html.en	10.17 KB	-rw-r--r--
mod_log_debug.html.fr.utf8	10.76 KB	-rw-r--r--
mod_log_forensic.html	415 B	-rw-r--r--
mod_log_forensic.html.en	12.76 KB	-rw-r--r--
mod_log_forensic.html.fr.utf8	14.38 KB	-rw-r--r--
mod_log_forensic.html.ja.utf8	14.2 KB	-rw-r--r--
mod_log_forensic.html.tr.utf8	13.26 KB	-rw-r--r--
mod_logio.html	479 B	-rw-r--r--
mod_logio.html.en	10.38 KB	-rw-r--r--
mod_logio.html.fr.utf8	11.02 KB	-rw-r--r--
mod_logio.html.ja.utf8	10.25 KB	-rw-r--r--
mod_logio.html.ko.euc-kr	9.23 KB	-rw-r--r--
mod_logio.html.tr.utf8	10.61 KB	-rw-r--r--
mod_lua.html	205 B	-rw-r--r--
mod_lua.html.en	91.74 KB	-rw-r--r--
mod_lua.html.fr.utf8	101.5 KB	-rw-r--r--
mod_macro.html	209 B	-rw-r--r--
mod_macro.html.en	15.14 KB	-rw-r--r--
mod_macro.html.fr.utf8	16.11 KB	-rw-r--r--
mod_md.html	203 B	-rw-r--r--
mod_md.html.en	95.75 KB	-rw-r--r--
mod_md.html.fr.utf8	103.21 KB	-rw-r--r--
mod_mime.html	295 B	-rw-r--r--
mod_mime.html.en	64.63 KB	-rw-r--r--
mod_mime.html.fr.utf8	70.52 KB	-rw-r--r--
mod_mime.html.ja.utf8	70.58 KB	-rw-r--r--
mod_mime_magic.html	219 B	-rw-r--r--
mod_mime_magic.html.en	16.67 KB	-rw-r--r--
mod_mime_magic.html.fr.utf8	17.74 KB	-rw-r--r--
mod_negotiation.html	316 B	-rw-r--r--
mod_negotiation.html.en	21.36 KB	-rw-r--r--
mod_negotiation.html.fr.utf8	23.09 KB	-rw-r--r--
mod_negotiation.html.ja.utf8	22.53 KB	-rw-r--r--
mod_nw_ssl.html	211 B	-rw-r--r--
mod_nw_ssl.html.en	9.5 KB	-rw-r--r--
mod_nw_ssl.html.fr.utf8	9.8 KB	-rw-r--r--
mod_privileges.html	219 B	-rw-r--r--
mod_privileges.html.en	29.36 KB	-rw-r--r--
mod_privileges.html.fr.utf8	32.73 KB	-rw-r--r--
mod_proxy.html	298 B	-rw-r--r--
mod_proxy.html.en	130.78 KB	-rw-r--r--
mod_proxy.html.fr.utf8	147.41 KB	-rw-r--r--
mod_proxy.html.ja.utf8	92.16 KB	-rw-r--r--
mod_proxy_ajp.html	310 B	-rw-r--r--
mod_proxy_ajp.html.en	32.1 KB	-rw-r--r--
mod_proxy_ajp.html.fr.utf8	35.22 KB	-rw-r--r--
mod_proxy_ajp.html.ja.utf8	32.25 KB	-rw-r--r--
mod_proxy_balancer.html	325 B	-rw-r--r--
mod_proxy_balancer.html.en	22.97 KB	-rw-r--r--
mod_proxy_balancer.html.fr.utf...	25.71 KB	-rw-r--r--
mod_proxy_balancer.html.ja.utf...	18.82 KB	-rw-r--r--
mod_proxy_connect.html	322 B	-rw-r--r--
mod_proxy_connect.html.en	10.05 KB	-rw-r--r--
mod_proxy_connect.html.fr.utf8	10.56 KB	-rw-r--r--
mod_proxy_connect.html.ja.utf8	9.2 KB	-rw-r--r--
mod_proxy_express.html	225 B	-rw-r--r--
mod_proxy_express.html.en	13.41 KB	-rw-r--r--
mod_proxy_express.html.fr.utf8	14.08 KB	-rw-r--r--
mod_proxy_fcgi.html	219 B	-rw-r--r--
mod_proxy_fcgi.html.en	22.3 KB	-rw-r--r--
mod_proxy_fcgi.html.fr.utf8	24.51 KB	-rw-r--r--
mod_proxy_fdpass.html	223 B	-rw-r--r--
mod_proxy_fdpass.html.en	7.49 KB	-rw-r--r--
mod_proxy_fdpass.html.fr.utf8	7.72 KB	-rw-r--r--
mod_proxy_ftp.html	217 B	-rw-r--r--
mod_proxy_ftp.html.en	18.35 KB	-rw-r--r--
mod_proxy_ftp.html.fr.utf8	20.33 KB	-rw-r--r--
mod_proxy_hcheck.html	223 B	-rw-r--r--
mod_proxy_hcheck.html.en	17.56 KB	-rw-r--r--
mod_proxy_hcheck.html.fr.utf8	18.75 KB	-rw-r--r--
mod_proxy_html.html	219 B	-rw-r--r--
mod_proxy_html.html.en	33.61 KB	-rw-r--r--
mod_proxy_html.html.fr.utf8	38.34 KB	-rw-r--r--
mod_proxy_http.html	219 B	-rw-r--r--
mod_proxy_http.html.en	11.82 KB	-rw-r--r--
mod_proxy_http.html.fr.utf8	12.7 KB	-rw-r--r--
mod_proxy_http2.html	221 B	-rw-r--r--
mod_proxy_http2.html.en	10.25 KB	-rw-r--r--
mod_proxy_http2.html.fr.utf8	10.81 KB	-rw-r--r--
mod_proxy_scgi.html	219 B	-rw-r--r--
mod_proxy_scgi.html.en	14.63 KB	-rw-r--r--
mod_proxy_scgi.html.fr.utf8	15.59 KB	-rw-r--r--
mod_proxy_uwsgi.html	221 B	-rw-r--r--
mod_proxy_uwsgi.html.en	8.4 KB	-rw-r--r--
mod_proxy_uwsgi.html.fr.utf8	8.7 KB	-rw-r--r--
mod_proxy_wstunnel.html	227 B	-rw-r--r--
mod_proxy_wstunnel.html.en	11.01 KB	-rw-r--r--
mod_proxy_wstunnel.html.fr.utf...	11.62 KB	-rw-r--r--
mod_ratelimit.html	217 B	-rw-r--r--
mod_ratelimit.html.en	7.05 KB	-rw-r--r--
mod_ratelimit.html.fr.utf8	7.38 KB	-rw-r--r--
mod_reflector.html	217 B	-rw-r--r--
mod_reflector.html.en	8.53 KB	-rw-r--r--
mod_reflector.html.fr.utf8	8.87 KB	-rw-r--r--
mod_remoteip.html	215 B	-rw-r--r--
mod_remoteip.html.en	26.61 KB	-rw-r--r--
mod_remoteip.html.fr.utf8	29.21 KB	-rw-r--r--
mod_reqtimeout.html	219 B	-rw-r--r--
mod_reqtimeout.html.en	12.75 KB	-rw-r--r--
mod_reqtimeout.html.fr.utf8	13.64 KB	-rw-r--r--
mod_request.html	304 B	-rw-r--r--
mod_request.html.en	9.31 KB	-rw-r--r--
mod_request.html.fr.utf8	9.91 KB	-rw-r--r--
mod_request.html.tr.utf8	9.69 KB	-rw-r--r--
mod_rewrite.html	213 B	-rw-r--r--
mod_rewrite.html.en	78.02 KB	-rw-r--r--
mod_rewrite.html.fr.utf8	84.61 KB	-rw-r--r--
mod_sed.html	205 B	-rw-r--r--
mod_sed.html.en	11.67 KB	-rw-r--r--
mod_sed.html.fr.utf8	12.21 KB	-rw-r--r--
mod_session.html	213 B	-rw-r--r--
mod_session.html.en	34.94 KB	-rw-r--r--
mod_session.html.fr.utf8	38.05 KB	-rw-r--r--
mod_session_cookie.html	227 B	-rw-r--r--
mod_session_cookie.html.en	13.71 KB	-rw-r--r--
mod_session_cookie.html.fr.utf...	14.46 KB	-rw-r--r--
mod_session_crypto.html	227 B	-rw-r--r--
mod_session_crypto.html.en	17.87 KB	-rw-r--r--
mod_session_crypto.html.fr.utf...	19.28 KB	-rw-r--r--
mod_session_dbd.html	221 B	-rw-r--r--
mod_session_dbd.html.en	25.07 KB	-rw-r--r--
mod_session_dbd.html.fr.utf8	26.96 KB	-rw-r--r--
mod_setenvif.html	494 B	-rw-r--r--
mod_setenvif.html.en	21.34 KB	-rw-r--r--
mod_setenvif.html.fr.utf8	23.04 KB	-rw-r--r--
mod_setenvif.html.ja.utf8	21.65 KB	-rw-r--r--
mod_setenvif.html.ko.euc-kr	17.41 KB	-rw-r--r--
mod_setenvif.html.tr.utf8	22.17 KB	-rw-r--r--
mod_slotmem_plain.html	225 B	-rw-r--r--
mod_slotmem_plain.html.en	8.1 KB	-rw-r--r--
mod_slotmem_plain.html.fr.utf8	8.45 KB	-rw-r--r--
mod_slotmem_shm.html	221 B	-rw-r--r--
mod_slotmem_shm.html.en	8.7 KB	-rw-r--r--
mod_slotmem_shm.html.fr.utf8	9.1 KB	-rw-r--r--
mod_so.html	464 B	-rw-r--r--
mod_so.html.en	13.66 KB	-rw-r--r--
mod_so.html.fr.utf8	15.09 KB	-rw-r--r--
mod_so.html.ja.utf8	16.29 KB	-rw-r--r--
mod_so.html.ko.euc-kr	12.39 KB	-rw-r--r--
mod_so.html.tr.utf8	15.01 KB	-rw-r--r--
mod_socache_dbm.html	221 B	-rw-r--r--
mod_socache_dbm.html.en	6.16 KB	-rw-r--r--
mod_socache_dbm.html.fr.utf8	6.29 KB	-rw-r--r--
mod_socache_dc.html	219 B	-rw-r--r--
mod_socache_dc.html.en	6.21 KB	-rw-r--r--
mod_socache_dc.html.fr.utf8	6.34 KB	-rw-r--r--
mod_socache_memcache.html	231 B	-rw-r--r--
mod_socache_memcache.html.en	8.65 KB	-rw-r--r--
mod_socache_memcache.html.fr.u...	9.16 KB	-rw-r--r--
mod_socache_redis.html	225 B	-rw-r--r--
mod_socache_redis.html.en	10.27 KB	-rw-r--r--
mod_socache_redis.html.fr.utf8	10.94 KB	-rw-r--r--
mod_socache_shmcb.html	225 B	-rw-r--r--
mod_socache_shmcb.html.en	6.24 KB	-rw-r--r--
mod_socache_shmcb.html.fr.utf8	6.38 KB	-rw-r--r--
mod_speling.html	398 B	-rw-r--r--
mod_speling.html.en	12.86 KB	-rw-r--r--
mod_speling.html.fr.utf8	13.57 KB	-rw-r--r--
mod_speling.html.ja.utf8	14.53 KB	-rw-r--r--
mod_speling.html.ko.euc-kr	11.75 KB	-rw-r--r--
mod_ssl.html	205 B	-rw-r--r--
mod_ssl.html.en	188.2 KB	-rw-r--r--
mod_ssl.html.fr.utf8	207.15 KB	-rw-r--r--
mod_status.html	484 B	-rw-r--r--
mod_status.html.en	11.93 KB	-rw-r--r--
mod_status.html.fr.utf8	12.82 KB	-rw-r--r--
mod_status.html.ja.utf8	11.42 KB	-rw-r--r--
mod_status.html.ko.euc-kr	9.55 KB	-rw-r--r--
mod_status.html.tr.utf8	12.64 KB	-rw-r--r--
mod_substitute.html	219 B	-rw-r--r--
mod_substitute.html.en	14.62 KB	-rw-r--r--
mod_substitute.html.fr.utf8	15.55 KB	-rw-r--r--
mod_suexec.html	484 B	-rw-r--r--
mod_suexec.html.en	8.11 KB	-rw-r--r--
mod_suexec.html.fr.utf8	8.37 KB	-rw-r--r--
mod_suexec.html.ja.utf8	8.93 KB	-rw-r--r--
mod_suexec.html.ko.euc-kr	8.07 KB	-rw-r--r--
mod_suexec.html.tr.utf8	8.32 KB	-rw-r--r--
mod_systemd.html	213 B	-rw-r--r--
mod_systemd.html.en	7.9 KB	-rw-r--r--
mod_systemd.html.fr.utf8	8.11 KB	-rw-r--r--
mod_tls.html	118 B	-rw-r--r--
mod_tls.html.en	42.32 KB	-rw-r--r--
mod_unique_id.html	406 B	-rw-r--r--
mod_unique_id.html.en	15.14 KB	-rw-r--r--
mod_unique_id.html.fr.utf8	17.4 KB	-rw-r--r--
mod_unique_id.html.ja.utf8	18.45 KB	-rw-r--r--
mod_unique_id.html.ko.euc-kr	13.09 KB	-rw-r--r--
mod_unixd.html	298 B	-rw-r--r--
mod_unixd.html.en	13.64 KB	-rw-r--r--
mod_unixd.html.fr.utf8	14.69 KB	-rw-r--r--
mod_unixd.html.tr.utf8	14.34 KB	-rw-r--r--
mod_userdir.html	489 B	-rw-r--r--
mod_userdir.html.en	12.57 KB	-rw-r--r--
mod_userdir.html.fr.utf8	13.71 KB	-rw-r--r--
mod_userdir.html.ja.utf8	13.08 KB	-rw-r--r--
mod_userdir.html.ko.euc-kr	10.79 KB	-rw-r--r--
mod_userdir.html.tr.utf8	13.22 KB	-rw-r--r--
mod_usertrack.html	217 B	-rw-r--r--
mod_usertrack.html.en	19.68 KB	-rw-r--r--

Code Editor : mod_tls.html.en

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />

<title>mod_tls - Apache HTTP Server Version 2.4</title>
<link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
<link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
<link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
<script src="../style/scripts/prettify.min.js" type="text/javascript">
</script>

<p>
            mod_tls is an alternative to <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> for providing https to a server.
            It's feature set is a subset, described in more detail below. It can
            be used as a companion to <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>, e.g. both modules can be loaded at
            the same time.
        </p><p>
            mod_tls, being written in C, used the Rust implementation of TLS named
            <a href="https://github.com/rustls/rustls">rustls</a> via its C interface
            <a href="https://github.com/rustls/rustls-ffi">rustls-ffi</a>. This gives
            <em>memory safe</em> cryptography and protocol handling at comparable
            performance.
        </p><p>
            It can be configured for frontend and backend connections. The configuration
            directive have been kept mostly similar to <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> ones.
        </p>
    </div>
<div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><h3>Topics</h3>
<ul id="topics">
<li><img alt="" src="../images/down.gif" /> <a href="#vhost_context">TLS in a VirtualHost context</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#comparison">Feature Comparison with mod_ssl</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#protocols">TLS Protocols</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#ciphers">TLS Ciphers</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#vhosts">Virtual Hosts</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#ACME">ACME Certificates</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#OCSP">OCSP Stapling</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#variables">TLS Variables</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#certificates">Client Certificates</a></li>
</ul><h3 class="directives">Directives</h3>
<ul id="toc">
<li><img alt="" src="../images/down.gif" /> <a href="#tlscertificate">TLSCertificate</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlsciphersprefer">TLSCiphersPrefer</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlscipherssuppress">TLSCiphersSuppress</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlsengine">TLSEngine</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlshonorclientorder">TLSHonorClientOrder</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlsoptions">TLSOptions</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlsprotocol">TLSProtocol</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlsproxyca">TLSProxyCA</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlsproxyciphersprefer">TLSProxyCiphersPrefer</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlsproxycipherssuppress">TLSProxyCiphersSuppress</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlsproxyengine">TLSProxyEngine</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlsproxymachinecertificate">TLSProxyMachineCertificate</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlsproxyprotocol">TLSProxyProtocol</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlssessioncache">TLSSessionCache</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#tlsstrictsni">TLSStrictSNI</a></li>
</ul>
<h3>Bugfix checklist</h3><ul class="seealso"><li><a href="https://www.apache.org/dist/httpd/CHANGES_2.4">httpd changelog</a></li><li><a href="https://bz.apache.org/bugzilla/buglist.cgi?bug_status=__open__&amp;list_id=144532&amp;product=Apache%20httpd-2&amp;query_format=specific&amp;order=changeddate%20DESC%2Cpriority%2Cbug_severity&amp;component=mod_tls">Known issues</a></li><li><a href="https://bz.apache.org/bugzilla/enter_bug.cgi?product=Apache%20httpd-2&amp;component=mod_tls">Report a bug</a></li></ul><h3>See also</h3>
<ul class="seealso">
<li><a href="#comments_section">Comments</a></li></ul></div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="section">
<h2><a name="vhost_context" id="vhost_context">TLS in a VirtualHost context</a></h2>
        
        <pre class="prettyprint lang-config">Listen 443
TLSEngine 443

&lt;VirtualHost *:443&gt;
  ServerName example.net
  TLSCertificate file_with_certificate.pem file_with_key.pem
  ...
&lt;/VirtualHost&gt;</pre>

<p>
            The above is a minimal configuration. Instead of enabling mod_tls
            in every virtual host, the port for incoming TLS connections is
            specified.
        </p><p>
            You cannot mix virtual hosts with <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> and mod_tls on the same
            port. It's either or. SNI and ALPN are supported. You may use several
            virtual hosts on the same port and a mix of protocols like http/1.1
            and h2.
        </p>
    </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="section">
<h2><a name="comparison" id="comparison">Feature Comparison with mod_ssl</a></h2>
        <p>
            The table below gives a comparison of feature between
            <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> and mod_tls. If a feature of <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> is no listed here,
            it is not supported by mod_tls. The one difference, probably most relevant
            is the lack for client certificate support in the current version of
            mod_tls.
        </p>
            <table>
                <tr><th>Feature</th><th>mod_ssl</th><th>mod_tls</th><th>Comment</th></tr>
<tr><td>Frontend TLS</td><td>yes</td><td>yes</td><td /></tr>
<tr><td>Backend TLS</td><td>yes</td><td>yes</td><td /></tr>
<tr><td>TLS v1.3</td><td>yes*</td><td>yes</td><td>*)with recent OpenSSL</td></tr>
<tr><td>TLS v1.2</td><td>yes</td><td>yes</td><td /></tr>
<tr><td>TLS v1.0</td><td>yes*</td><td>no</td><td>*)if enabled in OpenSSL</td></tr>
<tr><td>SNI Virtual Hosts</td><td>yes</td><td>yes</td><td /></tr>
<tr><td>Client Certificates</td><td>yes</td><td>no</td><td /></tr>
<tr><td>Machine Certificates for Backend</td><td>yes</td><td>yes</td><td /></tr>
<tr><td>OCSP Stapling</td><td>yes</td><td>yes*</td><td>*)via <code class="module"><a href="../mod/mod_md.html">mod_md</a></code></td></tr>
<tr><td>Backend OCSP check</td><td>yes</td><td>no*</td><td>*)stapling will be verified</td></tr>
<tr><td>TLS version to allow</td><td>min-max</td><td>min</td><td /></tr>
<tr><td>TLS ciphers</td><td>exclusive list</td><td>preferred/suppressed</td><td /></tr>
<tr><td>TLS cipher ordering</td><td>client/server</td><td>client/server</td><td /></tr>
<tr><td>TLS sessions</td><td>yes</td><td>yes</td><td /></tr>
<tr><td>SNI strictness</td><td>default no</td><td>default yes</td><td /></tr>
<tr><td>Option EnvVars</td><td>exhaustive</td><td>limited*</td><td>*)see var list</td></tr>
<tr><td>Option ExportCertData</td><td>client+server</td><td>server</td><td /></tr>
<tr><td>Backend CA</td><td>file/dir</td><td>file</td><td /></tr>
<tr><td>Revocation CRLs</td><td>yes</td><td>no</td><td /></tr>
<tr><td>TLS Renegotiation</td><td>yes*</td><td>no</td><td>*)in TLS v1.2</td></tr>
<tr><td>Encrypted Cert Keys</td><td>yes</td><td>no</td><td /></tr>
            </table>
        <p>
    	</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="section">
<h2><a name="protocols" id="protocols">TLS Protocols</a></h2>
        <p>
            mod_tls supports TLS protocol version 1.2 and 1.3. Should there ever be
            a version 1.4 and <code>rustls</code> supports it, it will be available as well.
        </p>
        <p>
            In mod_tls, you configure the <em>minimum</em> version to use, never the maximum:
        </p>
        <pre class="prettyprint lang-config">TLSProtocol TLSv1.3+</pre>

<p>
            This allows only version 1.3 and whatever may be its successor one day when talking
            to your server or to a particular virtual host.
    	</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="section">
<h2><a name="ciphers" id="ciphers">TLS Ciphers</a></h2>
        <p>
            The list of TLS ciphers supported in the <code>rustls</code> library,
            can be found <a href="https://docs.rs/rustls/">here</a>. All TLS v1.3
            ciphers are supported. For TLS v1.2, only ciphers that rustls considers
            secure are available.
        </p><p>
            mod_tls supports the following names for TLS ciphers:
        </p>
        <ol>
            <li>
                The <a href="https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-4">IANA assigned name</a>
                which uses `_` to separate parts. Example: <code>TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384</code>
            </li>
            <li>
                The OpenSSL name, using `-` as separator (for 1.2). Example: <code>ECDHE-ECDSA-AES256-SHA384</code>.
                Such names often appear in documentation. `mod_tls` defines them for all TLS v1.2 ciphers.
                For TLS v1.3 ciphers, names starting with <code>TLS13_</code> are also supported.
            </li>
            <li>
                The <a href="https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-4">IANA assigned identifier</a>,
                which is a 16-bit numeric value. Example: <code>0xc024</code>.
                You can use this in configurations as <code>TLS_CIPHER_0xc024</code>.
            </li>
        </ol>
        <p>
            You can configure a preference for ciphers, which means they will be used
            for clients that support them. If you do not configure a preference, <code>rustls</code>
            will use the one that it considers best. This is recommended.
        </p>
        <p>
            Should you nevertheless have the need to prefer one cipher over another, you
            may configure it like this:
        </p>
        <pre class="prettyprint lang-config">TLSCiphersPrefer ECDHE-ECDSA-AES256-SHA384
# or several
TLSCiphersPrefer ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305</pre>

<p>
            If you name a cipher that is unknown, the configuration will fail.
            If you name a cipher is not supported by <code>rustls</code> (or no
            longer supported in an updated version of <code>rustls</code> for security
            reasons), mod_tls will log a <code>WARNING</code>, but continue to work.
    	</p>
        <p>
            A similar mechanism exists, if you want to disable a particular cipher:
        </p>
        <pre class="prettyprint lang-config">TLSCipherSuppress ECDHE-ECDSA-AES256-SHA384</pre>

<p>
            A suppressed cipher will not longer be used.
            If you name a cipher that is unknown, the configuration will fail.
            If you name a cipher is not supported by <code>rustls</code> (or no
            longer supported in an updated version of <code>rustls</code> for security
            reasons), mod_tls will log a <code>WARNING</code>, but continue to work.
        </p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="section">
<h2><a name="vhosts" id="vhosts">Virtual Hosts</a></h2>
        <p>
            mod_tls uses the SNI (Server Name Indicator) to select one of the
            configured virtual hosts that match the port being served. Should
            the client not provide an SNI, the <em>first</em> configured
            virtual host will be selected. If the client <em>does</em> provide
            an SNI (as all today's clients do), it <em>must</em> match one
            virtual host (<code class="directive"><a href="../mod/core.html#servername">ServerName</a></code> or
            <code class="directive"><a href="../mod/core.html#serveralias">ServerAlias</a></code>)
            or the connection will fail.
        </p>
        <p>
            As with <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>, you may specify ciphers and protocol
            versions for the base server (global) and/or individual virtual hosts
            that are selected via SNI by the client.
        </p>
        <pre class="prettyprint lang-config">Listen 443
TLSEngine 443

&lt;VirtualHost *:443&gt;
  ServerName example1.net
  TLSCertificate example1-cert.pem
  ...
&lt;/VirtualHost&gt;

&lt;VirtualHost *:443&gt;
  ServerName example2.net
  TLSCertificate example2-cert.pem
  ...
  TLSProtocol v1.3+
&lt;/VirtualHost&gt;</pre>

<p>
            The example above show different TLS settings for virtual hosts on the
            same port. This is supported. <code>example1</code> can be contacted via
            all TLS versions and <code>example2</code> only allows v1.3 or later.
    	</p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="section">
<h2><a name="ACME" id="ACME">ACME Certificates</a></h2>
        <p>
            ACME certificates via <code class="module"><a href="../mod/mod_md.html">mod_md</a></code> are supported, just as
            for <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>. A minimal configuration:
        </p>
        <pre class="prettyprint lang-config">Listen 443
TLSEngine 443
MDomain example.net

&lt;VirtualHost *:443&gt;
  ServerName example.net
  ...
&lt;/VirtualHost&gt;</pre>

</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="section">
<h2><a name="OCSP" id="OCSP">OCSP Stapling</a></h2>
        <p>
            mod_tls has no own implementation to retrieve OCSP information for
            a certificate. However, it will use such for Stapling if it is provided
            by <code class="module"><a href="../mod/mod_md.html">mod_md</a></code>. See <code class="module"><a href="../mod/mod_md.html">mod_md</a></code>'s documentation
            on how to enable this.
        </p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="section">
<h2><a name="variables" id="variables">TLS Variables</a></h2>
        <p>
            Via the directive <code class="directive"><a href="#tlsoptions">TLSOptions</a></code>, several variables
            are placed into the environment of requests and can be inspected, for
            example in a CGI script.
        </p>
        <p>
            The variable names are given by <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>. Note that these
            are only a subset of the many variables that <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> exposes.
    	</p>
        <table>
            <tr><th>Variable</th><th>TLSOption</th><th>Description</th></tr>
            <tr><td>SSL_TLS_SNI</td><td>*</td><td>the server name indicator (SNI) send by the client</td></tr>
            <tr><td>SSL_PROTOCOL</td><td>*</td><td>the TLS protocol negotiated</td></tr>
            <tr><td>SSL_CIPHER</td><td>*</td><td>the name of the TLS cipher negotiated</td></tr>
            <tr><td>SSL_VERSION_INTERFACE</td><td>StdEnvVars</td><td>the module version</td></tr>
            <tr><td>SSL_VERSION_LIBRARY</td><td>StdEnvVars</td><td>the rustls-ffi version</td></tr>
            <tr><td>SSL_SECURE_RENEG</td><td>StdEnvVars</td><td>always `false`</td></tr>
            <tr><td>SSL_COMPRESS_METHOD</td><td>StdEnvVars</td><td>always `false`</td></tr>
            <tr><td>SSL_CIPHER_EXPORT</td><td>StdEnvVars</td><td>always `false`</td></tr>
            <tr><td>SSL_CLIENT_VERIFY</td><td>StdEnvVars</td><td>always `false`</td></tr>
            <tr><td>SSL_SESSION_RESUMED</td><td>StdEnvVars</td><td>either `Resumed` if a known TLS session id was presented by the client or `Initial` otherwise</td></tr>
            <tr><td>SSL_SERVER_CERT</td><td>ExportCertData</td><td>the selected server certificate in PEM format</td></tr>
        </table>
        <p>
           The variable <code>SSL_SESSION_ID</code> is intentionally not supported as
            it contains sensitive information.
        </p>
        </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="section">
<h2><a name="certificates" id="certificates">Client Certificates</a></h2>
        <p>
            While <code>rustls</code> supports client certificates in principle, parts
            of the infrastructure to make <em>use</em> of these in a server are not
            offered.
        </p>
        <p>
            Among these features are: revocation lists, inspection of certificate
            extensions and the matched issuer chain for OCSP validation. Without these,
            revocation of client certificates is not possible. Offering authentication
            without revocation is not considered an option.
        </p>
        <p>
            Work will continue on this and client certificate support may become
            available in a future release.
        </p>
        </div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSCertificate" id="TLSCertificate">TLSCertificate</a> <a name="tlscertificate" id="tlscertificate">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>adds a certificate and key (PEM encoded) to a server/virtual host.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSCertificate <em>cert_file</em> [<em>key_file</em>]</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                If you do not specify a separate key file, the key is assumed to also be
                found in the first file. You may add more than one certificate to a
                server/virtual host. The first certificate suitable for a client is then chosen.
            </p><p>
                The path can be specified relative to the server root.
            </p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSCiphersPrefer" id="TLSCiphersPrefer">TLSCiphersPrefer</a> <a name="tlsciphersprefer" id="tlsciphersprefer">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>defines ciphers that are preferred.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSCiphersPrefer <em>cipher(-list)</em></code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                This will not disable any ciphers supported by `rustls`. If you
                specify a cipher that is completely unknown, the configuration will
                fail. If you specify a cipher that is known but not supported by `rustls`,
                a warning will be logged but the server will continue.
            </p><p>
            </p>
            <div class="example"><h3>Example</h3><pre class="prettyprint lang-config">TLSCiphersPrefer ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305</pre>
</div>
            <p>
                The example gives 2 ciphers preference over others, in the
                order they are mentioned.
            </p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSCiphersSuppress" id="TLSCiphersSuppress">TLSCiphersSuppress</a> <a name="tlscipherssuppress" id="tlscipherssuppress">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>defines ciphers that are not to be used.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSCiphersSuppress <em>cipher(-list)</em></code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                This will not disable any unmentioned ciphers supported by `rustls`.
                If you specify a cipher that is completely unknown, the configuration will fail.
                If you specify a cipher that is known but not supported by `rustls`,
                a warning will be logged but the server will continue.
            </p><p>
            </p>
            <div class="example"><h3>Example</h3><pre class="prettyprint lang-config">TLSCiphersSuppress ECDHE-ECDSA-CHACHA20-POLY1305</pre>
</div>
            <p>
                The example removes a cipher for use in connections.
            </p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSEngine" id="TLSEngine">TLSEngine</a> <a name="tlsengine" id="tlsengine">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>defines on which address+port the module shall handle incoming connections.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSEngine [<em>address</em>:]<em>port</em></code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                This is set on a global level, not in individual <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>s.
                It will affect all <code class="directive"><a href="../mod/core.html#virtualhost">&lt;VirtualHost&gt;</a></code>
                that match the specified address/port.
                You can use <code class="directive">TLSEngine</code> several times to use more than one address/port.
            </p><p>
            </p>
            <div class="example"><h3>Example</h3><pre class="prettyprint lang-config">TLSEngine 443</pre>
</div>
            <p>
                The example tells mod_tls to handle incoming connection on port 443 for
                all listeners.
            </p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSHonorClientOrder" id="TLSHonorClientOrder">TLSHonorClientOrder</a> <a name="tlshonorclientorder" id="tlshonorclientorder">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>determines if the order of ciphers supported by the client is honored</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSHonorClientOrder on|off</code></td></tr>
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>TLSHonorClientOrder on</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                <code class="directive">TLSHonorClientOrder</code> determines if the order of ciphers
                supported by the client is honored.
            </p><p>
            </p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSOptions" id="TLSOptions">TLSOptions</a> <a name="tlsoptions" id="tlsoptions">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>enables SSL variables for requests.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSOptions [+|-]<em>option</em></code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, directory, .htaccess</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                <code class="directive">TLSOptions</code> is analog to <code class="directive"><a href="../mod/mod_ssl.html#ssloptions">SSLOptions</a></code> in <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.
                It can be set per directory/location and `option` can be:
            </p>
            <ul>
                <li>`StdEnvVars`: adds more variables to the requests environment,
                    as forwarded for example to CGI processing and other applications.
                </li>
                <li>`ExportCertData`: adds certificate related variables to the request environment.
                </li>
                <li>`Defaults`: resets all options to their default values.</li>
            </ul>
            <p>
                Adding variables to a request environment adds overhead, especially
                when certificates need to be inspected and fields extracted.
                Therefore most variables are not set by default.
            </p>
            <p>
                You can configure <code class="directive">TLSOptions</code> per location or generally on a
                server/virtual host. Prefixing an option with `-` disables this
                option while leaving others unchanged.
                A `+` prefix is the same as writing the option without one.
            </p>
            <p>
                The `Defaults` value can be used to reset any options that are
                inherited from other locations or the virtual host/server.
            </p>
            <div class="example"><h3>Example</h3><pre class="prettyprint lang-config">&lt;Location /myplace/app&gt;
  TLSOptions Defaults StdEnvVars
  ...
&lt;/Location&gt;</pre>
</div>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSProtocol" id="TLSProtocol">TLSProtocol</a> <a name="tlsprotocol" id="tlsprotocol">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>specifies the minimum version of the TLS protocol to use.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSProtocol <em>version</em>+</code></td></tr>
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>TLSProtocol v1.2+</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                The default is `v1.2+`. Settings this to `v1.3+` would disable TLSv1.2.
            </p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSProxyCA" id="TLSProxyCA">TLSProxyCA</a> <a name="tlsproxyca" id="tlsproxyca">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>sets the root certificates to validate the backend server with.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSProxyCA <em>file.pem</em></code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, proxy section</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>

</p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSProxyCiphersPrefer" id="TLSProxyCiphersPrefer">TLSProxyCiphersPrefer</a> <a name="tlsproxyciphersprefer" id="tlsproxyciphersprefer">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>defines ciphers that are preferred for a proxy connection.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSProxyCiphersPrefer <em>cipher(-list)</em></code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, proxy section</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                This will not disable any ciphers supported by `rustls`.
                If you specify a cipher that is completely unknown, the configuration will fail.
                If you specify a cipher that is known but not supported by `rustls`,
                a warning will be logged but the server will continue.
            </p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSProxyCiphersSuppress" id="TLSProxyCiphersSuppress">TLSProxyCiphersSuppress</a> <a name="tlsproxycipherssuppress" id="tlsproxycipherssuppress">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>defines ciphers that are not to be used for a proxy connection.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSProxyCiphersSuppress <em>cipher(-list)</em></code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, proxy section</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                This will not disable any unmentioned ciphers supported by `rustls`.
                If you specify a cipher that is completely unknown, the configuration will fail.
                If you specify a cipher that is known but not supported by `rustls`,
                a warning will be logged but the server will continue.
            </p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSProxyEngine" id="TLSProxyEngine">TLSProxyEngine</a> <a name="tlsproxyengine" id="tlsproxyengine">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>enables TLS for backend connections.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSProxyEngine on|off</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, proxy section</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                <code class="directive">TLSProxyEngine</code> is analog to <code class="directive"><a href="../mod/mod_ssl.html#sslproxyengine">SSLProxyEngine</a></code> in <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.
            </p><p>
                This can be used in a server/virtual host or <code class="directive"><a href="../mod/mod_proxy.html#proxy">&lt;Proxy&gt;</a></code> section to
                enable the module for outgoing connections using <code class="module"><a href="../mod/mod_proxy.html">mod_proxy</a></code>.
            </p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSProxyMachineCertificate" id="TLSProxyMachineCertificate">TLSProxyMachineCertificate</a> <a name="tlsproxymachinecertificate" id="tlsproxymachinecertificate">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>adds a certificate and key file (PEM encoded) to a proxy setup.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSProxyMachineCertificate <em>cert_file</em> [<em>key_file</em>]</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, proxy section</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                The certificate is used to authenticate against a proxied backend server.
            </p><p>
                If you do not specify a separate key file, the key is assumed to also be
                found in the first file. You may add more than one certificate to a proxy
                setup. The first certificate suitable for a proxy connection to a backend
                is then chosen by <code>rustls</code>.
            </p>
            <p>
                The path can be specified relative to the server root.
            </p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSProxyProtocol" id="TLSProxyProtocol">TLSProxyProtocol</a> <a name="tlsproxyprotocol" id="tlsproxyprotocol">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>specifies the minimum version of the TLS protocol to use in proxy connections.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSProxyProtocol <em>version</em>+</code></td></tr>
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>TLSProxyProtocol v1.2+</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, proxy section</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                The default is `v1.2+`. Settings this to `v1.3+` would disable TLSv1.2.
            </p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSSessionCache" id="TLSSessionCache">TLSSessionCache</a> <a name="tlssessioncache" id="tlssessioncache">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>specifies the cache for TLS session resumption.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSSessionCache <em>cache-spec</em></code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                This uses a cache on the server side to allow clients to resume connections.
            </p><p>
            You can set this to `none` or define a cache as in the <code class="directive"><a href="../mod/mod_ssl.html#sslsessioncache">SSLSessionCache</a></code>
            directive of <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code>.
            </p><p>
            If not configured, `mod_tls` will try to create a shared memory cache on its own,
            using `shmcb:tls/session-cache` as specification.
            Should that fail, a warning is logged, but the server continues.
            </p>
        
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="TLSStrictSNI" id="TLSStrictSNI">TLSStrictSNI</a> <a name="tlsstrictsni" id="tlsstrictsni">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>enforces exact matches of client server indicators (SNI) against host names.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>TLSStrictSNI on|off</code></td></tr>
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>TLSStrictSNI on</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_tls</td></tr>
</table>
            <p>
                Client connections using SNI will be unsuccessful if no match is found.
            </p>
        
</div>
</div>
<div class="bottomlang">
<p><span>Available Languages: </span><a href="../en/mod/mod_tls.html" title="English">&nbsp;en&nbsp;</a></p>
</div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Libera.chat, or sent to our <a href="https://httpd.apache.org/lists.html">mailing lists</a>.</div>
<script type="text/javascript"><![CDATA[//><!]]></script></div><div id="footer">
<p class="apache">Copyright 2023 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><![CDATA[//><!]]></script>
</body></html>

${this.title}

Code Editor : mod_tls.html.en